Distinct actors for distinct roles under one membership

A membership is a very valuable asset, as it becomes an entry point for highly rewarded roles as it accumulates social capital. We can make memberships even more robust assets if we enable complex divisions of labor behind a single membership, as it allows organizing ever-greater scope of economic activity under one stable identifier. An example would be where a single membership is controlled by a leader, and then this membership also has multiple roles like storage provisioning, curation, etc. which is occupied by distinct real world actors. The actor controlling the membership has overall control, which can be exercised by using the on-chain key hierarchy.

There is however a big obstacle to doing this in of the current approach. The role key is interpreted both as the way to manage the role, and to act within the role in some context, such as authetnicating for the forum or content directory. This means that a role actor gets the ability to perform abusive actions that go outside of just doing the work. One very salient example is changing the reward account.

An easy solution here is to not use the role key for any such sentistive actions, and instead require the member to do these. The role key is only used to "do the work", so to speak.

┆Issue is synchronized with this Asana task by Unito